导航|地址|刷新
Handle False Positives from Bot Fight Mo…

Skip to contentDocumentation Index
Fetch the complete documentation index at: https://developers.cloudflare.com/bots/llms.txt
Use this file to discover all available pages before exploring further.

Docs Directory API SDKs Changelog

Search

Log in

Bots

/

Overview

Plans

Get started

Bot Fight Mode

Super Bot Fight Mode

Bot Management

Concepts

Bots

Overview

Verified bots

Bot scores

Bot tags

Bot Feedback Loop

Bot detection engines

Additional configurations

JA3/JA4 fingerprint

Overview

Signals Intelligence

Detection IDs

Overview

Account takeover detections

Scraping detections

Additional detections

JavaScript detections ↗

Sequence rules

AI LabyrinthBeta

Block AI Bots

Custom rules

robots.txt setting

Static resource protection

Bot Analytics

BotBase

Attribution Business Insights

Workers templates

Delay action

Account Abuse ProtectionEarly Access

Troubleshooting

Bot Management skips

Super Bot Fight Mode for WordPress

False positives

Reference

Bot verification methods

Web Bot Auth

IP validation

Bot Management variables

Machine Learning models

Bot Detection Alerts

Sample terms

Glossary

Changelog

Agent resources

Agent setup ↗

Cloudflare Skills ↗

Code Mode MCP Server ↗

Domain-specific MCP Servers ↗MCP

Bots llms.txt ↗

Bots llms-full.txt ↗

Cloudflare Docs llms.txt ↗

Cloudflare Docs llms-full.txt ↗

Home

/Bots

/Troubleshooting

/False positives

Handle False Positives from Bot Fight Mode or Super Bot Fight Mode

Last updated Apr 15, 2026|Copy as Markdown|View as Markdown|Agent setup

Bot Fight Mode (BFM) and Super Bot Fight Mode (SBFM) are designed to stop active attacks quickly. Due to their aggressive nature, false positives can occur where legitimate human or automated traffic is incorrectly challenged or blocked.

When dealing with false positives, consider the following key differences and solutions:

Bot Fight Mode has limited control. You cannot bypass or skip Bot Fight Mode using the Skip action in WAF custom rules or using Page Rules. Bot Fight Mode will be disabled if there are any IP Access rules present. If you turned on BFM during an attack, and the attack has subsided, we recommend either disabling the feature using IP Access rules to bypass BFM, or looking at Bot Management for Enterprise, which gives you the ability to precisely customize your security threshold and create exception rules as needed.

Super Bot Fight Mode can be bypassed with IP Access Allow action rules. You can use the Skip action in WAF custom rules to specify where Super Bot Fight Mode should not run.

In parts of your site where you want bot traffic, you can use the Skip action in WAF custom rules to specify where Super Bot Fight Mode should not run.

You can use the Rules language and its operators and fields in custom rules to configure a scoped rule for approved automated traffic in Super Bot Fight Mode.

You cannot bypass or skip Bot Fight Mode using the Skip action in WAF custom rules or using Page Rules. Skip, Bypass, and Allow actions apply to rules or rulesets running on the Ruleset Engine. While Super Bot Fight Mode rules are implemented in the Ruleset Engine, Bot Fight Mode checks are not. This is why you can skip Super Bot Fight Mode, but not Bot Fight Mode. If you need to skip Bot Fight Mode, consider using Super Bot Fight Mode.

Bot Fight Mode can still trigger if you have IP Access rules, but it cannot trigger if an IP Access rule matches the request. For example, the IP Access rule matches the connecting IP.

If you encounter persistent false positives, you can disable the feature in the Cloudflare dashboard.

PreviousSuper Bot Fight Mode for WordPress NextWeb Bot Auth

Was this helpful?

YesNo

Edit page Report issue

On this page

Overview

Edit page Report issue

Getting started
PlansContact salesPartnersFind a partnerStartupsUnder attack?Domain name search

Company
AboutCareersInvestorsPressPress kitGlobal network

Public interest
Project GalileoAthenian ProjectCloudflare for CampaignsProject FairshotImpact/ESG

Compliance
Compliance resourcesTrust HubData ProtectionResponsible AITransparency reportReport abuse

Resources
App innovation reportCloudflare RadarCase studiesStatusSupportEventsBlog

Developers
DocumentationLearning centerCommunity

Solutions
SSE and SASE platformCloudflare AI CloudAI SecurityFrontend Development PlatformMulti-Tenant Platform DevelopmentWeb Security Platform

Start BuildingLog In

© 2026 Cloudflare, Inc.

Privacy policy|Report security issues|Terms of use|Trademark
|
Your privacy choices

Docs

------
导航页打开网址